Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 20-11-2016 01
Exécuté par admin (administrateur) sur ADMIN-PC (20-11-2016 21:04:11)
Exécuté depuis C:\Users\admin\Downloads
Profils chargés: admin (Profils disponibles: admin)
Platform: Microsoft Windows 7 Professionnel (X86) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(PowerISO Computing, Inc.) C:\Program Files\PowerISO\PWRISOVM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Alfa Programs ®) C:\Program Files\Alfa Programs\Alfa Autorun Killer 3.0\Alfa Autorun Killer 3.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTAgent.exe
(BitTorrent Inc.) C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(BitTorrent Inc.) C:\Users\admin\AppData\Roaming\uTorrent\updates\3.4.9_42923\utorrentie.exe
(BitTorrent Inc.) C:\Users\admin\AppData\Roaming\uTorrent\updates\3.4.9_42923\utorrentie.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2009-12-22] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [948672 2009-12-11] (Adobe Systems Incorporated)
HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM\...\Run: [Alfa Autorun Killer 3] => C:\Program Files\Alfa Programs\Alfa Autorun Killer 3.0\Alfa Autorun Killer 3.exe [233984 2011-06-02] (Alfa Programs ®)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [SysinfYhX] => C:\WINDOWS\system32\cmd.exe /c start wscript /e:VBScript.Encode %temp%\SysinfYhX.db
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [AlcoholAutomount] => C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files\DAEMON Tools Pro\DTAgent.exe [427328 2010-04-15] (DT Soft Ltd)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [uTorrent] => C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe [2145472 2016-11-20] (BitTorrent Inc.)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7045848 2016-11-15] (Piriform Ltd)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\MountPoints2: F - F:\AutoRun.exe TMM50
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-11-08] (AVAST Software)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{B8D66E70-75D5-4762-8783-F96BB564F3D8}: [DhcpNameServer] 192.168.1.1
ManualProxies: 0hxxp://none-stops.net/wpad.dat?0c0eb22c4e0147bdb14949718aee193b20308223
Internet Explorer:
==================
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?ocid=iehp
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21] (Adobe Systems Incorporated)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-11-08] (AVAST Software)
BHO: Pas de nom -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Pas de fichier
FireFox:
========
FF DefaultProfile: e2qouiw9.default
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2qouiw9.default [2016-11-20]
FF Extension: (Visual Bookmarks) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2qouiw9.default\Extensions\vb@yandex.ru.xpi [2016-11-18]
FF Extension: (&Yandex Elements&) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2qouiw9.default\Extensions\yasearch@yandex.ru.xpi [2016-11-18]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-11-08]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-11-08]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-20] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-17] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\4368027.js [2016-11-18] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\4368027.cfg [2016-11-18] <==== ATTENTION
Chrome:
=======
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default [2016-11-20]
CHR Extension: (Google Docs) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-05]
CHR Extension: (Google Sheets) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-05]
CHR Extension: (Google Docs hors connexion) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-05]
CHR Extension: (Chrome Media Router) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-28]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-11-08] (AVAST Software)
S2 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Fichier non signé]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34008 2016-11-08] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [35096 2016-11-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [92256 2016-11-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [91232 2016-11-08] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [60424 2016-11-08] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [735488 2016-11-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [433768 2016-11-08] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [118664 2016-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [224752 2016-11-08] (AVAST Software)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [59388 2010-04-12] (PowerISO Computing, Inc.) [Fichier non signé]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324152 2016-11-16] (Duplex Secure Ltd.)
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [165376 2009-08-16] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [55040 2009-08-16] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-08-16] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [293904 2009-08-16] (Microsoft Corporation)
U3 a58bweeg; C:\Windows\system32\Drivers\a58bweeg.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zéro octet Fichier/Dossier)
U3 awrnpayw; C:\Windows\system32\Drivers\awrnpayw.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zéro octet Fichier/Dossier)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-11-20 21:04 - 2016-11-20 21:06 - 00010783 _____ C:\Users\admin\Downloads\FRST.txt
2016-11-20 21:03 - 2016-11-20 21:04 - 00000000 ____D C:\FRST
2016-11-20 21:02 - 2016-11-20 21:02 - 01762304 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2016-11-20 17:47 - 2016-11-20 17:47 - 00000047 _____ C:\Users\admin\Desktop\script host.txt
2016-11-20 17:21 - 2016-11-20 17:22 - 05497846 _____ (Alfa Programs(R)2005 - 2011 ) C:\Users\admin\Downloads\Alfa Autorun Killer 3.0.7 (1).exe
2016-11-20 17:11 - 2016-11-20 17:11 - 00000000 ____D C:\Users\admin\Desktop\Nouveau dossier
2016-11-20 17:07 - 2016-11-20 17:07 - 00001311 _____ C:\Users\Public\Desktop\Alfa Autorun Killer 3.lnk
2016-11-20 17:07 - 2016-11-20 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alfa Programs
2016-11-20 17:07 - 2016-11-20 17:07 - 00000000 ____D C:\Program Files\Alfa Programs
2016-11-20 17:07 - 1998-06-13 23:53 - 00044544 _____ () C:\Windows\system32\GIF89.DLL
2016-11-20 17:05 - 2016-11-20 17:06 - 05497846 _____ (Alfa Programs(R)2005 - 2011 ) C:\Users\admin\Downloads\Alfa Autorun Killer 3.0.7.exe
2016-11-20 16:41 - 2016-11-20 20:20 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-20 16:41 - 2016-11-20 16:44 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-11-20 16:41 - 2016-11-20 16:44 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-11-19 00:06 - 2016-11-19 00:06 - 00000018 _____ C:\Users\admin\Desktop\mp tel more.txt
2016-11-18 21:40 - 2016-11-18 21:40 - 06502932 _____ (Auralog) C:\Users\admin\Downloads\Non confirmé 626453.crdownload
2016-11-18 21:21 - 2016-11-18 21:21 - 00000021 _____ C:\Users\admin\Desktop\t mor.txt
2016-11-18 20:49 - 2016-11-18 20:23 - 00499264 ____N C:\Users\admin\Downloads\trzA259.tmp
2016-11-18 00:32 - 2016-11-18 00:32 - 00000000 ____D C:\Users\admin\Downloads\Snowden
2016-11-18 00:02 - 2016-11-20 20:52 - 00000000 ____D C:\Users\admin\AppData\LocalLow\uTorrent
2016-11-18 00:01 - 2016-11-18 00:01 - 00002639 _____ C:\Users\admin\Desktop\µTorrent.lnk
2016-11-18 00:01 - 2016-11-18 00:01 - 00002639 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-11-18 00:00 - 2016-11-18 20:50 - 02026520 _____ (BitTorrent Inc.) C:\Users\admin\Downloads\utorrent [1].exe
2016-11-17 23:59 - 2016-11-17 23:59 - 01671584 _____ ( ) C:\Users\admin\Downloads\utorrent.exe
2016-11-17 23:55 - 2016-11-17 23:55 - 00243704 _____ C:\Users\admin\Downloads\Firefox Setup Stub 50.0 (1).exe
2016-11-17 23:42 - 2016-11-17 23:42 - 00132078 _____ C:\Users\admin\Downloads\torrent_finder_toolbar-1.3.1-fx.xpi
2016-11-17 23:39 - 2016-11-19 00:41 - 00000000 ____D C:\Users\admin\AppData\LocalLow\Mozilla
2016-11-17 23:38 - 2016-11-17 23:38 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-11-17 23:38 - 2016-11-17 23:38 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-11-17 23:38 - 2016-11-17 23:38 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-11-17 23:33 - 2016-11-17 23:33 - 00243704 _____ C:\Users\admin\Downloads\Firefox Setup Stub 50.0.exe
2016-11-17 23:27 - 2016-11-17 23:40 - 312530592 _____ (BlueStack Systems Inc.) C:\Users\admin\Downloads\Non confirmé 144914.crdownload
2016-11-17 23:18 - 2016-11-17 23:19 - 02403008 _____ (BitTorrent Inc.) C:\Users\admin\Downloads\uTorrent (3).exe
2016-11-17 23:02 - 2016-11-17 23:03 - 00000000 ____D C:\Program Files\CCleaner
2016-11-17 23:02 - 2016-11-17 23:02 - 00000973 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-11-17 23:02 - 2016-11-17 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-11-17 23:00 - 2016-11-17 23:01 - 08576448 _____ (Piriform Ltd) C:\Users\admin\Downloads\ccsetup524.exe
2016-11-17 22:56 - 2016-11-17 22:56 - 00000000 __RSH C:\MSDOS.SYS
2016-11-17 22:56 - 2016-11-17 22:56 - 00000000 __RSH C:\IO.SYS
2016-11-17 22:44 - 2016-11-17 22:49 - 00000000 ____D C:\Windows\system32\appmgmt
2016-11-17 00:19 - 2016-11-17 22:45 - 00000000 ____D C:\Program Files\ByteFence
2016-11-17 00:01 - 2016-11-17 00:03 - 00000000 ____D C:\Users\admin\Downloads\Pioneer.One.S01E01.REFIX.Xvid-VODO
2016-11-16 23:58 - 2016-11-16 23:58 - 00000927 _____ C:\ProgramData\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-11-16 23:58 - 2016-11-16 23:58 - 00000000 ____D C:\Program Files\uTorrent
2016-11-16 23:28 - 2016-11-16 23:28 - 00001886 _____ C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
2016-11-16 23:27 - 2016-11-16 23:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
2016-11-16 23:27 - 2016-11-16 23:27 - 00000000 ____D C:\Program Files\DAEMON Tools Pro
2016-11-16 23:26 - 2016-11-17 23:06 - 00000000 ____D C:\Users\admin\AppData\Roaming\DAEMON Tools Pro
2016-11-16 23:26 - 2016-11-16 23:27 - 00000000 ____D C:\ProgramData\DAEMON Tools Pro
2016-11-16 21:58 - 2016-11-16 21:58 - 00001146 _____ C:\Users\Public\Desktop\Alcohol 120%.lnk
2016-11-16 21:58 - 2016-11-16 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
2016-11-16 21:54 - 2016-11-16 21:54 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence
2016-11-15 23:24 - 2000-02-07 11:06 - 00106496 _____ (Marco Bellinaso) C:\Windows\system32\MBTray.ocx
2016-11-15 23:14 - 2011-01-18 17:47 - 00806717 _____ C:\Users\admin\Desktop\Shortcut Virus Remover v3.1.exe
2016-11-15 23:01 - 2016-11-15 23:01 - 00738336 _____ C:\Users\admin\Downloads\Shortcut Virus Remover v3.1.rar
2016-11-12 00:43 - 2016-11-12 00:49 - 502619566 _____ C:\Users\admin\Desktop\Office 2007.rar
2016-11-12 00:40 - 2016-11-12 00:42 - 00000000 ____D C:\Users\admin\Desktop\Office 2007
2016-11-11 23:37 - 2016-11-15 22:54 - 00000000 ____D C:\Users\admin\AppData\Local\Mozilla
2016-11-11 23:37 - 2016-11-11 23:37 - 00000000 ____D C:\Users\admin\AppData\Roaming\Mozilla
2016-11-10 23:30 - 2016-11-10 23:27 - 06057554 _____ C:\Users\admin\Desktop\فن واسرار اتخاد القرار.pdf
2016-11-10 23:21 - 2016-11-10 23:27 - 06057554 _____ C:\Users\admin\Downloads\فن واسرار اتخاد القرار.pdf
2016-11-10 22:51 - 2016-11-10 22:51 - 00050692 _____ C:\Users\admin\Downloads\195.zip
2016-11-08 23:19 - 2013-11-25 13:27 - 00222360 _____ (Microsoft Corporation) C:\Windows\system32\tabctl32.ocx
2016-11-08 23:19 - 2013-11-25 13:27 - 00219288 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx
2016-11-08 23:19 - 2013-11-25 13:27 - 00127640 _____ (Microsoft Corporation) C:\Windows\system32\mswinsck.ocx
2016-11-08 23:19 - 2013-11-25 13:27 - 00104088 _____ (Microsoft Corporation) C:\Windows\system32\picclp32.ocx
2016-11-08 23:19 - 2013-11-25 13:27 - 00084624 _____ (Microsoft Corporation) C:\Windows\system32\sysinfo.ocx
2016-11-08 23:19 - 2008-04-15 12:00 - 01355776 _____ (Microsoft Corporation) C:\Windows\system32\msvbvm50.dll
2016-11-08 23:19 - 2007-01-30 16:04 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr70.dll
2016-11-08 23:19 - 2002-01-05 01:40 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\MSVCP70.DLL
2016-11-08 23:19 - 1996-01-12 00:00 - 00935632 _____ (Microsoft Corporation) C:\Windows\system\Vb40016.dll
2016-11-08 23:19 - 1996-01-12 00:00 - 00722192 _____ (Microsoft Corporation) C:\Windows\system32\Vb40032.dll
2016-11-08 23:19 - 1994-11-17 21:00 - 00210944 _____ C:\Windows\system32\msvcrt10.dll
2016-11-08 23:19 - 1993-05-11 17:00 - 00398416 _____ (Microsoft Corporation) C:\Windows\system\Vbrun300.dll
2016-11-08 23:19 - 1992-10-20 22:00 - 00356992 _____ (Microsoft Corporation) C:\Windows\system\vbrun200.dll
2016-11-08 23:19 - 1991-05-09 23:00 - 00271264 _____ C:\Windows\system\vbrun100.dll
2016-11-08 23:18 - 2013-11-25 13:27 - 00660120 _____ (Microsoft Corporation) C:\Windows\system32\mscomct2.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00444328 _____ (Microsoft Corporation) C:\Windows\system32\MShflxgd.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00279192 _____ (Microsoft Corporation) C:\Windows\system32\msdatgrd.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00259736 _____ (Microsoft Corporation) C:\Windows\system32\msflxgrd.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00253080 _____ (Microsoft Corporation) C:\Windows\system32\msdatlst.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00179352 _____ (Microsoft Corporation) C:\Windows\system32\msmask32.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00131728 _____ (Microsoft Corporation) C:\Windows\system32\msinet.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00119960 _____ (Microsoft Corporation) C:\Windows\system32\mscomm32.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00108696 _____ (Microsoft Corporation) C:\Windows\system32\MSSTKPRP.DLL
2016-11-08 23:18 - 2011-01-12 19:36 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\MFC71u.dll
2016-11-08 23:18 - 2011-01-12 19:25 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\MFC71DEU.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ITA.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71FRA.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ESP.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ENU.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MFC71KOR.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MFC71JPN.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\MFC71CHT.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\MFC71CHS.DLL
2016-11-08 23:18 - 2011-01-12 19:19 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\MFC71.dll
2016-11-08 23:18 - 2006-08-25 20:28 - 01017344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70u.dll
2016-11-08 23:18 - 2006-04-10 20:41 - 01066176 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL32.OCX
2016-11-08 23:18 - 2005-01-20 15:25 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll
2016-11-08 23:17 - 2016-03-10 13:31 - 00040112 _____ (TOSHIBA Corporation) C:\Windows\system32\Drivers\tosrfec.sys
2016-11-08 23:17 - 2014-09-10 16:14 - 00163480 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00617896 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00416408 _____ (Microsoft Corporation ) C:\Windows\system32\comct332.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00218776 _____ (Microsoft Corporation) C:\Windows\system32\dblist32.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00212112 _____ (Microsoft Corporation) C:\Windows\system32\mci32.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00170920 _____ (Microsoft Corporation) C:\Windows\system32\comct232.ocx
2016-11-08 23:17 - 2011-01-12 18:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\atl71.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ita.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70fra.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70esp.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70deu.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70enu.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70kor.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70jpn.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\mfc70cht.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\mfc70chs.dll
2016-11-08 23:17 - 2006-08-25 20:07 - 01024000 _____ (Microsoft Corporation) C:\Windows\system32\mfc70.dll
2016-11-08 23:17 - 2006-08-25 19:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\atl70.dll
2016-11-08 23:13 - 2016-11-08 23:13 - 00000000 ____D C:\Users\admin\AppData\Roaming\Opera Software
2016-11-08 23:13 - 2016-11-08 23:13 - 00000000 ____D C:\Users\admin\AppData\Local\Opera Software
2016-11-08 23:13 - 2009-06-19 18:44 - 00290816 _____ (Texas Instruments) C:\Windows\system32\Drivers\tifm21.sys
2016-11-08 23:09 - 2016-11-18 20:23 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-11-08 23:05 - 2016-11-16 23:32 - 00000000 ____D C:\Program Files\Opera
2016-11-08 22:54 - 2016-11-17 22:59 - 00000000 ____D C:\Program Files\DriverPack Notifier
2016-11-08 22:54 - 2016-11-08 22:55 - 00000000 ____D C:\Users\admin\AppData\Roaming\DriverPack Notifier
2016-11-08 22:53 - 2016-11-08 22:58 - 00000000 ____D C:\Users\admin\AppData\Roaming\DRPSu
2016-11-08 22:53 - 2016-11-08 22:53 - 00000000 ____D C:\Users\admin\AppData\Roaming\DRPNano
2016-11-08 22:36 - 2016-11-16 22:00 - 00000260 _____ C:\Users\admin\Documents\ax_files.xml
2016-11-08 22:35 - 2015-08-18 01:04 - 00000000 ____D C:\Users\admin\Desktop\Alcohol 120
2016-11-08 22:28 - 2016-11-08 22:28 - 00000000 ____D C:\Program Files\Alcohol Soft
2016-11-08 22:20 - 2013-04-15 12:25 - 00000000 ____D C:\Users\admin\Desktop\booksjadid.blogspot.com.CD4
2016-11-08 22:06 - 2016-11-17 22:48 - 00000000 ____D C:\ProgramData\FLEXnet
2016-11-08 22:05 - 2016-11-08 22:05 - 00000000 ____D C:\Program Files\Rosetta Stone
2016-11-08 22:05 - 2016-11-08 22:05 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2016-11-08 21:58 - 2016-11-08 21:58 - 00001128 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-11-08 21:58 - 2016-11-08 21:58 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-11-08 21:57 - 2016-11-08 21:57 - 00035096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-11-08 21:35 - 2016-11-08 21:35 - 00002083 _____ C:\Users\Public\Desktop\Avast Antivirus Gratuit.lnk
2016-11-08 21:35 - 2016-11-08 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-11-08 21:33 - 2016-11-08 21:34 - 00433768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-11-08 21:33 - 2016-11-08 21:34 - 00224752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-11-08 21:33 - 2016-11-08 21:32 - 00118664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-11-08 21:33 - 2016-11-08 21:32 - 00092256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-11-08 21:33 - 2016-11-08 21:32 - 00060424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-11-08 21:33 - 2016-11-08 21:32 - 00034008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-11-08 21:32 - 2016-11-16 21:55 - 00324152 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2016-11-08 21:32 - 2016-11-08 21:33 - 00735488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-11-08 21:32 - 2016-11-08 21:32 - 00091232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-11-08 21:32 - 2016-11-08 21:30 - 00319760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-11-08 21:30 - 2016-11-08 21:30 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-11-08 21:21 - 2016-11-08 22:01 - 128062771 _____ C:\Users\admin\Downloads\قارء الاسطوانات.Com.r.s.3.4.7.cd0.rar
2016-11-08 21:21 - 2016-11-08 21:25 - 08273536 _____ (Alcohol Soft Development Team) C:\Users\admin\Downloads\Alcohol120.exe
2016-11-08 21:17 - 2016-11-08 21:57 - 00000000 ____D C:\Program Files\AVAST Software
2016-11-08 21:03 - 2013-04-15 12:24 - 00000000 ____D C:\Users\admin\Desktop\booksjadid.blogspot.com.CD2
2016-11-08 20:53 - 2016-11-08 22:18 - 415146204 _____ C:\Users\admin\Downloads\4تحميل اسطوانه تعليم اللغه الفرنسيه Tell Me More Frenchbooksjadid.blogspot.com.CD4.zip
2016-11-08 20:48 - 2016-11-08 20:48 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\w95inf32.dll
2016-11-08 20:48 - 2016-11-08 20:48 - 00002272 _____ (Microsoft Corporation) C:\Windows\system32\w95inf16.dll
2016-11-08 20:48 - 1998-09-02 08:28 - 01088272 _____ (Microsoft Corporation) C:\Windows\system32\danim.dll
2016-11-08 20:48 - 1998-09-02 08:28 - 00155408 _____ (Microsoft Corporation) C:\Windows\system32\LMRT.dll
2016-11-08 20:48 - 1998-09-02 08:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\unam4ie.exe
2016-11-08 20:48 - 1998-09-02 08:28 - 00038160 _____ (Microsoft Corporation) C:\Windows\system32\LMRTREND.dll
2016-11-08 20:48 - 1998-09-02 08:02 - 00194320 _____ (Microsoft Corporation) C:\Windows\system32\qcut.dll
2016-11-08 20:48 - 1998-08-27 04:51 - 00182032 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft3.dll
2016-11-08 20:48 - 1998-08-20 11:02 - 00140800 _____ (The Duck Corporation) C:\Windows\system32\tm20dec.ax
2016-11-08 20:48 - 1998-08-20 10:38 - 00217984 _____ (Microsoft Corporation) C:\Windows\system32\strmdll.dll
2016-11-08 20:48 - 1998-08-17 09:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz.drv
2016-11-08 20:48 - 1998-08-17 09:21 - 00010240 _____ C:\Windows\system32\vidx16.dll
2016-11-08 20:48 - 1998-08-17 09:21 - 00005672 _____ C:\Windows\system32\quartz.vxd
2016-11-08 20:41 - 2016-11-18 23:13 - 00000000 _____ C:\Windows\err.txt
2016-11-08 20:39 - 2016-11-08 21:28 - 00000000 ____D C:\Users\admin\Desktop\booksjadid.blogspot.com.CD1
2016-11-08 20:07 - 2016-11-08 20:52 - 383901014 _____ C:\Users\admin\Downloads\2تحميل اسطوانه تعليم اللغه الفرنسيه Tell Me More Frenchbooksjadid.blogspot.com.CD2.zip
2016-11-08 19:26 - 2016-11-08 23:32 - 00000000 ____D C:\Users\admin\Desktop\tel me more
2016-11-08 19:12 - 2016-11-08 19:12 - 00548614 _____ C:\Users\admin\Downloads\Alcohol 120شرح.zip
2016-11-08 19:11 - 2016-11-08 19:11 - 00000018 _____ C:\Users\admin\Desktop\serial tel me more.txt
2016-11-08 19:08 - 2016-11-08 19:42 - 292461568 _____ C:\Users\admin\Downloads\1تحميل اسطوانه تعليم اللغه الفرنسيه Tell Me More Frenchbooksjadid.blogspot.com.CD1.zip
2016-11-07 21:27 - 2016-11-07 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2016-11-07 20:58 - 2016-11-07 20:58 - 00000000 ____D C:\Users\admin\AppData\Local\CEF
2016-11-07 20:48 - 2016-11-07 20:48 - 00000000 ____D C:\Users\admin\AppData\Roaming\AVAST Software
2016-11-07 20:45 - 2016-11-07 20:45 - 00000000 ____D C:\Program Files\Common Files\AV
2016-11-07 20:44 - 2016-11-07 20:43 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2016-11-07 20:42 - 2016-11-07 20:42 - 06334896 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online__5_.exe
2016-11-07 20:41 - 2016-11-07 21:29 - 00000000 ____D C:\Program Files\PowerISO
2016-11-07 20:41 - 2016-11-07 21:27 - 00000973 _____ C:\Users\Public\Desktop\PowerISO.lnk
2016-11-07 20:41 - 2016-11-07 20:41 - 00000000 ____D C:\Users\admin\AppData\Roaming\PowerISO
2016-11-07 20:40 - 2016-11-16 22:34 - 00000000 ___SD C:\Users\admin\AppData\LocalLow\Temp
2016-11-07 20:39 - 2016-11-08 21:57 - 00000000 ____D C:\ProgramData\AVAST Software
2016-11-07 20:35 - 2016-11-20 21:04 - 00000000 ____D C:\Users\admin\AppData\Roaming\uTorrent
2016-11-07 20:35 - 2016-11-07 20:36 - 03969880 _____ (Power Software Ltd) C:\Users\admin\Downloads\PowerISO6.exe
2016-11-04 22:29 - 2016-11-04 22:31 - 00000000 ____D C:\Users\admin\Desktop\sharit video
2016-11-04 22:26 - 2016-11-05 15:53 - 00000000 ____D C:\Users\admin\Desktop\photo abdou
2016-11-04 15:36 - 2016-11-04 15:41 - 00000000 ____D C:\Users\admin\AppData\Roaming\dvdcss
2016-11-04 10:11 - 2016-09-23 17:26 - 15606238 _____ C:\Users\admin\Desktop\configuration routeur movistar Maroc telecom.mp4
2016-11-01 18:15 - 2016-11-01 18:15 - 00000000 ____D C:\Users\admin\Documents\GTA Vice City User Files
2016-11-01 18:15 - 2016-11-01 18:15 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-10-30 11:32 - 1998-07-30 18:40 - 00306688 _____ (InstallShield Software Corporation) C:\Windows\IsUn040c.exe
2016-10-30 11:31 - 2016-10-30 11:31 - 00000978 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft PowerPoint Viewer 97.lnk
2016-10-30 11:31 - 2016-10-30 11:31 - 00000000 ____D C:\Program Files\WinZip
2016-10-30 11:31 - 2016-10-30 11:31 - 00000000 ____D C:\Program Files\PowerPoint Viewer
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-11-20 21:00 - 2009-07-14 04:34 - 00009600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-20 21:00 - 2009-07-14 04:34 - 00009600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-20 20:52 - 2016-05-28 15:52 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-20 20:52 - 2009-07-14 04:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-20 20:52 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\inf
2016-11-20 20:14 - 2016-05-28 15:52 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-20 16:44 - 2016-05-28 15:56 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-20 16:44 - 2016-05-28 15:53 - 00001032 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-11-20 16:44 - 2016-05-28 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-11-20 16:44 - 2016-05-28 15:50 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-20 16:44 - 2016-05-28 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-20 16:44 - 2016-05-28 15:50 - 00000000 ____D C:\Program Files\WinRAR
2016-11-20 16:39 - 2016-05-28 16:10 - 00000000 ____D C:\Windows\system32\Adobe
2016-11-17 23:06 - 2016-05-28 14:55 - 00000000 ____D C:\Windows\Panther
2016-11-17 22:56 - 2016-05-28 15:50 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-11-17 22:56 - 2016-05-28 15:50 - 00000000 ____D C:\Program Files\Adobe
2016-11-16 23:54 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\Help
2016-11-16 22:22 - 2016-05-28 15:57 - 00002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-16 22:22 - 2016-05-28 15:57 - 00002131 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-15 23:25 - 2016-05-28 16:21 - 00000000 ____D C:\Users\admin\AppData\Local\VirtualStore
2016-11-15 22:22 - 2016-05-28 16:24 - 00004568 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-15 22:22 - 2009-07-14 08:39 - 01429334 _____ C:\Windows\system32\perfh00C.dat
2016-11-15 22:22 - 2009-07-14 08:39 - 00373002 _____ C:\Windows\system32\perfc00C.dat
2016-11-08 23:19 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\system
2016-11-08 20:49 - 2016-05-28 16:21 - 00000000 ____D C:\Users\admin
2016-11-07 22:20 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\system32\NDF
2016-11-05 14:57 - 2009-07-14 04:53 - 00032592 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-10-29 11:46 - 2016-05-28 15:51 - 00000000 ____D C:\Users\admin\AppData\Local\Google
2016-10-24 18:54 - 2016-05-28 15:54 - 00000000 ____D C:\Users\admin\AppData\Roaming\vlc
==================== Fichiers à la racine de certains dossiers =======
2016-09-03 11:33 - 2016-09-03 11:33 - 0000000 _____ () C:\Users\admin\AppData\Local\{69938C47-6A2E-411F-B985-2FB0EF3F7159}
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le MD5 est légitime
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-09-25 10:29
==================== Fin de FRST.txt ============================
Exécuté par admin (administrateur) sur ADMIN-PC (20-11-2016 21:04:11)
Exécuté depuis C:\Users\admin\Downloads
Profils chargés: admin (Profils disponibles: admin)
Platform: Microsoft Windows 7 Professionnel (X86) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(PowerISO Computing, Inc.) C:\Program Files\PowerISO\PWRISOVM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Alfa Programs ®) C:\Program Files\Alfa Programs\Alfa Autorun Killer 3.0\Alfa Autorun Killer 3.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTAgent.exe
(BitTorrent Inc.) C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(BitTorrent Inc.) C:\Users\admin\AppData\Roaming\uTorrent\updates\3.4.9_42923\utorrentie.exe
(BitTorrent Inc.) C:\Users\admin\AppData\Roaming\uTorrent\updates\3.4.9_42923\utorrentie.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [35760 2009-12-22] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [948672 2009-12-11] (Adobe Systems Incorporated)
HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM\...\Run: [Alfa Autorun Killer 3] => C:\Program Files\Alfa Programs\Alfa Autorun Killer 3.0\Alfa Autorun Killer 3.exe [233984 2011-06-02] (Alfa Programs ®)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [SysinfYhX] => C:\WINDOWS\system32\cmd.exe /c start wscript /e:VBScript.Encode %temp%\SysinfYhX.db
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [AlcoholAutomount] => C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files\DAEMON Tools Pro\DTAgent.exe [427328 2010-04-15] (DT Soft Ltd)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [uTorrent] => C:\Users\admin\AppData\Roaming\uTorrent\uTorrent.exe [2145472 2016-11-20] (BitTorrent Inc.)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7045848 2016-11-15] (Piriform Ltd)
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\...\MountPoints2: F - F:\AutoRun.exe TMM50
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-11-08] (AVAST Software)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{B8D66E70-75D5-4762-8783-F96BB564F3D8}: [DhcpNameServer] 192.168.1.1
ManualProxies: 0hxxp://none-stops.net/wpad.dat?0c0eb22c4e0147bdb14949718aee193b20308223
Internet Explorer:
==================
HKU\S-1-5-21-1781619585-2792899626-2949151781-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?ocid=iehp
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21] (Adobe Systems Incorporated)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-11-08] (AVAST Software)
BHO: Pas de nom -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Pas de fichier
FireFox:
========
FF DefaultProfile: e2qouiw9.default
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2qouiw9.default [2016-11-20]
FF Extension: (Visual Bookmarks) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2qouiw9.default\Extensions\vb@yandex.ru.xpi [2016-11-18]
FF Extension: (&Yandex Elements&) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e2qouiw9.default\Extensions\yasearch@yandex.ru.xpi [2016-11-18]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-11-08]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-11-08]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-20] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-17] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-08-17] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\4368027.js [2016-11-18] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\4368027.cfg [2016-11-18] <==== ATTENTION
Chrome:
=======
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default [2016-11-20]
CHR Extension: (Google Docs) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-05]
CHR Extension: (Google Sheets) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-05]
CHR Extension: (Google Docs hors connexion) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-05]
CHR Extension: (Chrome Media Router) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-28]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-11-08] (AVAST Software)
S2 AxAutoMntSrv; C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft Development Team)
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Fichier non signé]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34008 2016-11-08] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [35096 2016-11-08] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [92256 2016-11-08] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [91232 2016-11-08] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [60424 2016-11-08] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [735488 2016-11-08] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [433768 2016-11-08] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [118664 2016-11-08] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [224752 2016-11-08] (AVAST Software)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [59388 2010-04-12] (PowerISO Computing, Inc.) [Fichier non signé]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [324152 2016-11-16] (Duplex Secure Ltd.)
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [165376 2009-08-16] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [55040 2009-08-16] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-08-16] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [293904 2009-08-16] (Microsoft Corporation)
U3 a58bweeg; C:\Windows\system32\Drivers\a58bweeg.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zéro octet Fichier/Dossier)
U3 awrnpayw; C:\Windows\system32\Drivers\awrnpayw.sys [0 ] (Advanced Micro Devices) <==== ATTENTION (zéro octet Fichier/Dossier)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-11-20 21:04 - 2016-11-20 21:06 - 00010783 _____ C:\Users\admin\Downloads\FRST.txt
2016-11-20 21:03 - 2016-11-20 21:04 - 00000000 ____D C:\FRST
2016-11-20 21:02 - 2016-11-20 21:02 - 01762304 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2016-11-20 17:47 - 2016-11-20 17:47 - 00000047 _____ C:\Users\admin\Desktop\script host.txt
2016-11-20 17:21 - 2016-11-20 17:22 - 05497846 _____ (Alfa Programs(R)2005 - 2011 ) C:\Users\admin\Downloads\Alfa Autorun Killer 3.0.7 (1).exe
2016-11-20 17:11 - 2016-11-20 17:11 - 00000000 ____D C:\Users\admin\Desktop\Nouveau dossier
2016-11-20 17:07 - 2016-11-20 17:07 - 00001311 _____ C:\Users\Public\Desktop\Alfa Autorun Killer 3.lnk
2016-11-20 17:07 - 2016-11-20 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alfa Programs
2016-11-20 17:07 - 2016-11-20 17:07 - 00000000 ____D C:\Program Files\Alfa Programs
2016-11-20 17:07 - 1998-06-13 23:53 - 00044544 _____ () C:\Windows\system32\GIF89.DLL
2016-11-20 17:05 - 2016-11-20 17:06 - 05497846 _____ (Alfa Programs(R)2005 - 2011 ) C:\Users\admin\Downloads\Alfa Autorun Killer 3.0.7.exe
2016-11-20 16:41 - 2016-11-20 20:20 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-20 16:41 - 2016-11-20 16:44 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-11-20 16:41 - 2016-11-20 16:44 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-11-19 00:06 - 2016-11-19 00:06 - 00000018 _____ C:\Users\admin\Desktop\mp tel more.txt
2016-11-18 21:40 - 2016-11-18 21:40 - 06502932 _____ (Auralog) C:\Users\admin\Downloads\Non confirmé 626453.crdownload
2016-11-18 21:21 - 2016-11-18 21:21 - 00000021 _____ C:\Users\admin\Desktop\t mor.txt
2016-11-18 20:49 - 2016-11-18 20:23 - 00499264 ____N C:\Users\admin\Downloads\trzA259.tmp
2016-11-18 00:32 - 2016-11-18 00:32 - 00000000 ____D C:\Users\admin\Downloads\Snowden
2016-11-18 00:02 - 2016-11-20 20:52 - 00000000 ____D C:\Users\admin\AppData\LocalLow\uTorrent
2016-11-18 00:01 - 2016-11-18 00:01 - 00002639 _____ C:\Users\admin\Desktop\µTorrent.lnk
2016-11-18 00:01 - 2016-11-18 00:01 - 00002639 _____ C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-11-18 00:00 - 2016-11-18 20:50 - 02026520 _____ (BitTorrent Inc.) C:\Users\admin\Downloads\utorrent [1].exe
2016-11-17 23:59 - 2016-11-17 23:59 - 01671584 _____ ( ) C:\Users\admin\Downloads\utorrent.exe
2016-11-17 23:55 - 2016-11-17 23:55 - 00243704 _____ C:\Users\admin\Downloads\Firefox Setup Stub 50.0 (1).exe
2016-11-17 23:42 - 2016-11-17 23:42 - 00132078 _____ C:\Users\admin\Downloads\torrent_finder_toolbar-1.3.1-fx.xpi
2016-11-17 23:39 - 2016-11-19 00:41 - 00000000 ____D C:\Users\admin\AppData\LocalLow\Mozilla
2016-11-17 23:38 - 2016-11-17 23:38 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-11-17 23:38 - 2016-11-17 23:38 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-11-17 23:38 - 2016-11-17 23:38 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-11-17 23:33 - 2016-11-17 23:33 - 00243704 _____ C:\Users\admin\Downloads\Firefox Setup Stub 50.0.exe
2016-11-17 23:27 - 2016-11-17 23:40 - 312530592 _____ (BlueStack Systems Inc.) C:\Users\admin\Downloads\Non confirmé 144914.crdownload
2016-11-17 23:18 - 2016-11-17 23:19 - 02403008 _____ (BitTorrent Inc.) C:\Users\admin\Downloads\uTorrent (3).exe
2016-11-17 23:02 - 2016-11-17 23:03 - 00000000 ____D C:\Program Files\CCleaner
2016-11-17 23:02 - 2016-11-17 23:02 - 00000973 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-11-17 23:02 - 2016-11-17 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-11-17 23:00 - 2016-11-17 23:01 - 08576448 _____ (Piriform Ltd) C:\Users\admin\Downloads\ccsetup524.exe
2016-11-17 22:56 - 2016-11-17 22:56 - 00000000 __RSH C:\MSDOS.SYS
2016-11-17 22:56 - 2016-11-17 22:56 - 00000000 __RSH C:\IO.SYS
2016-11-17 22:44 - 2016-11-17 22:49 - 00000000 ____D C:\Windows\system32\appmgmt
2016-11-17 00:19 - 2016-11-17 22:45 - 00000000 ____D C:\Program Files\ByteFence
2016-11-17 00:01 - 2016-11-17 00:03 - 00000000 ____D C:\Users\admin\Downloads\Pioneer.One.S01E01.REFIX.Xvid-VODO
2016-11-16 23:58 - 2016-11-16 23:58 - 00000927 _____ C:\ProgramData\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-11-16 23:58 - 2016-11-16 23:58 - 00000000 ____D C:\Program Files\uTorrent
2016-11-16 23:28 - 2016-11-16 23:28 - 00001886 _____ C:\Users\Public\Desktop\DAEMON Tools Pro.lnk
2016-11-16 23:27 - 2016-11-16 23:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
2016-11-16 23:27 - 2016-11-16 23:27 - 00000000 ____D C:\Program Files\DAEMON Tools Pro
2016-11-16 23:26 - 2016-11-17 23:06 - 00000000 ____D C:\Users\admin\AppData\Roaming\DAEMON Tools Pro
2016-11-16 23:26 - 2016-11-16 23:27 - 00000000 ____D C:\ProgramData\DAEMON Tools Pro
2016-11-16 21:58 - 2016-11-16 21:58 - 00001146 _____ C:\Users\Public\Desktop\Alcohol 120%.lnk
2016-11-16 21:58 - 2016-11-16 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alcohol 120%
2016-11-16 21:54 - 2016-11-16 21:54 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\ByteFence
2016-11-15 23:24 - 2000-02-07 11:06 - 00106496 _____ (Marco Bellinaso) C:\Windows\system32\MBTray.ocx
2016-11-15 23:14 - 2011-01-18 17:47 - 00806717 _____ C:\Users\admin\Desktop\Shortcut Virus Remover v3.1.exe
2016-11-15 23:01 - 2016-11-15 23:01 - 00738336 _____ C:\Users\admin\Downloads\Shortcut Virus Remover v3.1.rar
2016-11-12 00:43 - 2016-11-12 00:49 - 502619566 _____ C:\Users\admin\Desktop\Office 2007.rar
2016-11-12 00:40 - 2016-11-12 00:42 - 00000000 ____D C:\Users\admin\Desktop\Office 2007
2016-11-11 23:37 - 2016-11-15 22:54 - 00000000 ____D C:\Users\admin\AppData\Local\Mozilla
2016-11-11 23:37 - 2016-11-11 23:37 - 00000000 ____D C:\Users\admin\AppData\Roaming\Mozilla
2016-11-10 23:30 - 2016-11-10 23:27 - 06057554 _____ C:\Users\admin\Desktop\فن واسرار اتخاد القرار.pdf
2016-11-10 23:21 - 2016-11-10 23:27 - 06057554 _____ C:\Users\admin\Downloads\فن واسرار اتخاد القرار.pdf
2016-11-10 22:51 - 2016-11-10 22:51 - 00050692 _____ C:\Users\admin\Downloads\195.zip
2016-11-08 23:19 - 2013-11-25 13:27 - 00222360 _____ (Microsoft Corporation) C:\Windows\system32\tabctl32.ocx
2016-11-08 23:19 - 2013-11-25 13:27 - 00219288 _____ (Microsoft Corporation) C:\Windows\system32\richtx32.ocx
2016-11-08 23:19 - 2013-11-25 13:27 - 00127640 _____ (Microsoft Corporation) C:\Windows\system32\mswinsck.ocx
2016-11-08 23:19 - 2013-11-25 13:27 - 00104088 _____ (Microsoft Corporation) C:\Windows\system32\picclp32.ocx
2016-11-08 23:19 - 2013-11-25 13:27 - 00084624 _____ (Microsoft Corporation) C:\Windows\system32\sysinfo.ocx
2016-11-08 23:19 - 2008-04-15 12:00 - 01355776 _____ (Microsoft Corporation) C:\Windows\system32\msvbvm50.dll
2016-11-08 23:19 - 2007-01-30 16:04 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\msvcr70.dll
2016-11-08 23:19 - 2002-01-05 01:40 - 00487424 _____ (Microsoft Corporation) C:\Windows\system32\MSVCP70.DLL
2016-11-08 23:19 - 1996-01-12 00:00 - 00935632 _____ (Microsoft Corporation) C:\Windows\system\Vb40016.dll
2016-11-08 23:19 - 1996-01-12 00:00 - 00722192 _____ (Microsoft Corporation) C:\Windows\system32\Vb40032.dll
2016-11-08 23:19 - 1994-11-17 21:00 - 00210944 _____ C:\Windows\system32\msvcrt10.dll
2016-11-08 23:19 - 1993-05-11 17:00 - 00398416 _____ (Microsoft Corporation) C:\Windows\system\Vbrun300.dll
2016-11-08 23:19 - 1992-10-20 22:00 - 00356992 _____ (Microsoft Corporation) C:\Windows\system\vbrun200.dll
2016-11-08 23:19 - 1991-05-09 23:00 - 00271264 _____ C:\Windows\system\vbrun100.dll
2016-11-08 23:18 - 2013-11-25 13:27 - 00660120 _____ (Microsoft Corporation) C:\Windows\system32\mscomct2.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00444328 _____ (Microsoft Corporation) C:\Windows\system32\MShflxgd.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00279192 _____ (Microsoft Corporation) C:\Windows\system32\msdatgrd.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00259736 _____ (Microsoft Corporation) C:\Windows\system32\msflxgrd.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00253080 _____ (Microsoft Corporation) C:\Windows\system32\msdatlst.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00179352 _____ (Microsoft Corporation) C:\Windows\system32\msmask32.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00131728 _____ (Microsoft Corporation) C:\Windows\system32\msinet.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00119960 _____ (Microsoft Corporation) C:\Windows\system32\mscomm32.ocx
2016-11-08 23:18 - 2013-11-25 13:27 - 00108696 _____ (Microsoft Corporation) C:\Windows\system32\MSSTKPRP.DLL
2016-11-08 23:18 - 2011-01-12 19:36 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\MFC71u.dll
2016-11-08 23:18 - 2011-01-12 19:25 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\MFC71DEU.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ITA.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71FRA.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ESP.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\MFC71ENU.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MFC71KOR.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\MFC71JPN.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\MFC71CHT.DLL
2016-11-08 23:18 - 2011-01-12 19:25 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\MFC71CHS.DLL
2016-11-08 23:18 - 2011-01-12 19:19 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\MFC71.dll
2016-11-08 23:18 - 2006-08-25 20:28 - 01017344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70u.dll
2016-11-08 23:18 - 2006-04-10 20:41 - 01066176 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL32.OCX
2016-11-08 23:18 - 2005-01-20 15:25 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\msvci70.dll
2016-11-08 23:17 - 2016-03-10 13:31 - 00040112 _____ (TOSHIBA Corporation) C:\Windows\system32\Drivers\tosrfec.sys
2016-11-08 23:17 - 2014-09-10 16:14 - 00163480 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00617896 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00416408 _____ (Microsoft Corporation ) C:\Windows\system32\comct332.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00218776 _____ (Microsoft Corporation) C:\Windows\system32\dblist32.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00212112 _____ (Microsoft Corporation) C:\Windows\system32\mci32.ocx
2016-11-08 23:17 - 2013-11-25 13:27 - 00170920 _____ (Microsoft Corporation) C:\Windows\system32\comct232.ocx
2016-11-08 23:17 - 2011-01-12 18:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\atl71.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70ita.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70fra.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70esp.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\mfc70deu.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\mfc70enu.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70kor.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\mfc70jpn.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\mfc70cht.dll
2016-11-08 23:17 - 2006-08-25 20:15 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\mfc70chs.dll
2016-11-08 23:17 - 2006-08-25 20:07 - 01024000 _____ (Microsoft Corporation) C:\Windows\system32\mfc70.dll
2016-11-08 23:17 - 2006-08-25 19:17 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\atl70.dll
2016-11-08 23:13 - 2016-11-08 23:13 - 00000000 ____D C:\Users\admin\AppData\Roaming\Opera Software
2016-11-08 23:13 - 2016-11-08 23:13 - 00000000 ____D C:\Users\admin\AppData\Local\Opera Software
2016-11-08 23:13 - 2009-06-19 18:44 - 00290816 _____ (Texas Instruments) C:\Windows\system32\Drivers\tifm21.sys
2016-11-08 23:09 - 2016-11-18 20:23 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-11-08 23:05 - 2016-11-16 23:32 - 00000000 ____D C:\Program Files\Opera
2016-11-08 22:54 - 2016-11-17 22:59 - 00000000 ____D C:\Program Files\DriverPack Notifier
2016-11-08 22:54 - 2016-11-08 22:55 - 00000000 ____D C:\Users\admin\AppData\Roaming\DriverPack Notifier
2016-11-08 22:53 - 2016-11-08 22:58 - 00000000 ____D C:\Users\admin\AppData\Roaming\DRPSu
2016-11-08 22:53 - 2016-11-08 22:53 - 00000000 ____D C:\Users\admin\AppData\Roaming\DRPNano
2016-11-08 22:36 - 2016-11-16 22:00 - 00000260 _____ C:\Users\admin\Documents\ax_files.xml
2016-11-08 22:35 - 2015-08-18 01:04 - 00000000 ____D C:\Users\admin\Desktop\Alcohol 120
2016-11-08 22:28 - 2016-11-08 22:28 - 00000000 ____D C:\Program Files\Alcohol Soft
2016-11-08 22:20 - 2013-04-15 12:25 - 00000000 ____D C:\Users\admin\Desktop\booksjadid.blogspot.com.CD4
2016-11-08 22:06 - 2016-11-17 22:48 - 00000000 ____D C:\ProgramData\FLEXnet
2016-11-08 22:05 - 2016-11-08 22:05 - 00000000 ____D C:\Program Files\Rosetta Stone
2016-11-08 22:05 - 2016-11-08 22:05 - 00000000 ____D C:\Program Files\Common Files\Macrovision Shared
2016-11-08 21:58 - 2016-11-08 21:58 - 00001128 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-11-08 21:58 - 2016-11-08 21:58 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-11-08 21:57 - 2016-11-08 21:57 - 00035096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-11-08 21:35 - 2016-11-08 21:35 - 00002083 _____ C:\Users\Public\Desktop\Avast Antivirus Gratuit.lnk
2016-11-08 21:35 - 2016-11-08 21:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-11-08 21:33 - 2016-11-08 21:34 - 00433768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-11-08 21:33 - 2016-11-08 21:34 - 00224752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-11-08 21:33 - 2016-11-08 21:32 - 00118664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-11-08 21:33 - 2016-11-08 21:32 - 00092256 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-11-08 21:33 - 2016-11-08 21:32 - 00060424 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-11-08 21:33 - 2016-11-08 21:32 - 00034008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-11-08 21:32 - 2016-11-16 21:55 - 00324152 _____ (Duplex Secure Ltd.) C:\Windows\system32\Drivers\sptd.sys
2016-11-08 21:32 - 2016-11-08 21:33 - 00735488 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2016-11-08 21:32 - 2016-11-08 21:32 - 00091232 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-11-08 21:32 - 2016-11-08 21:30 - 00319760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-11-08 21:30 - 2016-11-08 21:30 - 00053208 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-11-08 21:21 - 2016-11-08 22:01 - 128062771 _____ C:\Users\admin\Downloads\قارء الاسطوانات.Com.r.s.3.4.7.cd0.rar
2016-11-08 21:21 - 2016-11-08 21:25 - 08273536 _____ (Alcohol Soft Development Team) C:\Users\admin\Downloads\Alcohol120.exe
2016-11-08 21:17 - 2016-11-08 21:57 - 00000000 ____D C:\Program Files\AVAST Software
2016-11-08 21:03 - 2013-04-15 12:24 - 00000000 ____D C:\Users\admin\Desktop\booksjadid.blogspot.com.CD2
2016-11-08 20:53 - 2016-11-08 22:18 - 415146204 _____ C:\Users\admin\Downloads\4تحميل اسطوانه تعليم اللغه الفرنسيه Tell Me More Frenchbooksjadid.blogspot.com.CD4.zip
2016-11-08 20:48 - 2016-11-08 20:48 - 00004608 _____ (Microsoft Corporation) C:\Windows\system32\w95inf32.dll
2016-11-08 20:48 - 2016-11-08 20:48 - 00002272 _____ (Microsoft Corporation) C:\Windows\system32\w95inf16.dll
2016-11-08 20:48 - 1998-09-02 08:28 - 01088272 _____ (Microsoft Corporation) C:\Windows\system32\danim.dll
2016-11-08 20:48 - 1998-09-02 08:28 - 00155408 _____ (Microsoft Corporation) C:\Windows\system32\LMRT.dll
2016-11-08 20:48 - 1998-09-02 08:28 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\unam4ie.exe
2016-11-08 20:48 - 1998-09-02 08:28 - 00038160 _____ (Microsoft Corporation) C:\Windows\system32\LMRTREND.dll
2016-11-08 20:48 - 1998-09-02 08:02 - 00194320 _____ (Microsoft Corporation) C:\Windows\system32\qcut.dll
2016-11-08 20:48 - 1998-08-27 04:51 - 00182032 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft3.dll
2016-11-08 20:48 - 1998-08-20 11:02 - 00140800 _____ (The Duck Corporation) C:\Windows\system32\tm20dec.ax
2016-11-08 20:48 - 1998-08-20 10:38 - 00217984 _____ (Microsoft Corporation) C:\Windows\system32\strmdll.dll
2016-11-08 20:48 - 1998-08-17 09:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mciqtz.drv
2016-11-08 20:48 - 1998-08-17 09:21 - 00010240 _____ C:\Windows\system32\vidx16.dll
2016-11-08 20:48 - 1998-08-17 09:21 - 00005672 _____ C:\Windows\system32\quartz.vxd
2016-11-08 20:41 - 2016-11-18 23:13 - 00000000 _____ C:\Windows\err.txt
2016-11-08 20:39 - 2016-11-08 21:28 - 00000000 ____D C:\Users\admin\Desktop\booksjadid.blogspot.com.CD1
2016-11-08 20:07 - 2016-11-08 20:52 - 383901014 _____ C:\Users\admin\Downloads\2تحميل اسطوانه تعليم اللغه الفرنسيه Tell Me More Frenchbooksjadid.blogspot.com.CD2.zip
2016-11-08 19:26 - 2016-11-08 23:32 - 00000000 ____D C:\Users\admin\Desktop\tel me more
2016-11-08 19:12 - 2016-11-08 19:12 - 00548614 _____ C:\Users\admin\Downloads\Alcohol 120شرح.zip
2016-11-08 19:11 - 2016-11-08 19:11 - 00000018 _____ C:\Users\admin\Desktop\serial tel me more.txt
2016-11-08 19:08 - 2016-11-08 19:42 - 292461568 _____ C:\Users\admin\Downloads\1تحميل اسطوانه تعليم اللغه الفرنسيه Tell Me More Frenchbooksjadid.blogspot.com.CD1.zip
2016-11-07 21:27 - 2016-11-07 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
2016-11-07 20:58 - 2016-11-07 20:58 - 00000000 ____D C:\Users\admin\AppData\Local\CEF
2016-11-07 20:48 - 2016-11-07 20:48 - 00000000 ____D C:\Users\admin\AppData\Roaming\AVAST Software
2016-11-07 20:45 - 2016-11-07 20:45 - 00000000 ____D C:\Program Files\Common Files\AV
2016-11-07 20:44 - 2016-11-07 20:43 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2016-11-07 20:42 - 2016-11-07 20:42 - 06334896 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online__5_.exe
2016-11-07 20:41 - 2016-11-07 21:29 - 00000000 ____D C:\Program Files\PowerISO
2016-11-07 20:41 - 2016-11-07 21:27 - 00000973 _____ C:\Users\Public\Desktop\PowerISO.lnk
2016-11-07 20:41 - 2016-11-07 20:41 - 00000000 ____D C:\Users\admin\AppData\Roaming\PowerISO
2016-11-07 20:40 - 2016-11-16 22:34 - 00000000 ___SD C:\Users\admin\AppData\LocalLow\Temp
2016-11-07 20:39 - 2016-11-08 21:57 - 00000000 ____D C:\ProgramData\AVAST Software
2016-11-07 20:35 - 2016-11-20 21:04 - 00000000 ____D C:\Users\admin\AppData\Roaming\uTorrent
2016-11-07 20:35 - 2016-11-07 20:36 - 03969880 _____ (Power Software Ltd) C:\Users\admin\Downloads\PowerISO6.exe
2016-11-04 22:29 - 2016-11-04 22:31 - 00000000 ____D C:\Users\admin\Desktop\sharit video
2016-11-04 22:26 - 2016-11-05 15:53 - 00000000 ____D C:\Users\admin\Desktop\photo abdou
2016-11-04 15:36 - 2016-11-04 15:41 - 00000000 ____D C:\Users\admin\AppData\Roaming\dvdcss
2016-11-04 10:11 - 2016-09-23 17:26 - 15606238 _____ C:\Users\admin\Desktop\configuration routeur movistar Maroc telecom.mp4
2016-11-01 18:15 - 2016-11-01 18:15 - 00000000 ____D C:\Users\admin\Documents\GTA Vice City User Files
2016-11-01 18:15 - 2016-11-01 18:15 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-10-30 11:32 - 1998-07-30 18:40 - 00306688 _____ (InstallShield Software Corporation) C:\Windows\IsUn040c.exe
2016-10-30 11:31 - 2016-10-30 11:31 - 00000978 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft PowerPoint Viewer 97.lnk
2016-10-30 11:31 - 2016-10-30 11:31 - 00000000 ____D C:\Program Files\WinZip
2016-10-30 11:31 - 2016-10-30 11:31 - 00000000 ____D C:\Program Files\PowerPoint Viewer
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-11-20 21:00 - 2009-07-14 04:34 - 00009600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-20 21:00 - 2009-07-14 04:34 - 00009600 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-20 20:52 - 2016-05-28 15:52 - 00001054 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-20 20:52 - 2009-07-14 04:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-20 20:52 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\inf
2016-11-20 20:14 - 2016-05-28 15:52 - 00001058 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-20 16:44 - 2016-05-28 15:56 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-20 16:44 - 2016-05-28 15:53 - 00001032 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-11-20 16:44 - 2016-05-28 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-11-20 16:44 - 2016-05-28 15:50 - 00000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-20 16:44 - 2016-05-28 15:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-11-20 16:44 - 2016-05-28 15:50 - 00000000 ____D C:\Program Files\WinRAR
2016-11-20 16:39 - 2016-05-28 16:10 - 00000000 ____D C:\Windows\system32\Adobe
2016-11-17 23:06 - 2016-05-28 14:55 - 00000000 ____D C:\Windows\Panther
2016-11-17 22:56 - 2016-05-28 15:50 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-11-17 22:56 - 2016-05-28 15:50 - 00000000 ____D C:\Program Files\Adobe
2016-11-16 23:54 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\Help
2016-11-16 22:22 - 2016-05-28 15:57 - 00002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-16 22:22 - 2016-05-28 15:57 - 00002131 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-15 23:25 - 2016-05-28 16:21 - 00000000 ____D C:\Users\admin\AppData\Local\VirtualStore
2016-11-15 22:22 - 2016-05-28 16:24 - 00004568 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-15 22:22 - 2009-07-14 08:39 - 01429334 _____ C:\Windows\system32\perfh00C.dat
2016-11-15 22:22 - 2009-07-14 08:39 - 00373002 _____ C:\Windows\system32\perfc00C.dat
2016-11-08 23:19 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\system
2016-11-08 20:49 - 2016-05-28 16:21 - 00000000 ____D C:\Users\admin
2016-11-07 22:20 - 2009-07-14 02:37 - 00000000 ____D C:\Windows\system32\NDF
2016-11-05 14:57 - 2009-07-14 04:53 - 00032592 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-10-29 11:46 - 2016-05-28 15:51 - 00000000 ____D C:\Users\admin\AppData\Local\Google
2016-10-24 18:54 - 2016-05-28 15:54 - 00000000 ____D C:\Users\admin\AppData\Roaming\vlc
==================== Fichiers à la racine de certains dossiers =======
2016-09-03 11:33 - 2016-09-03 11:33 - 0000000 _____ () C:\Users\admin\AppData\Local\{69938C47-6A2E-411F-B985-2FB0EF3F7159}
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le MD5 est légitime
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-09-25 10:29
==================== Fin de FRST.txt ============================